Merge pull request #168 from TreWilkinsRC/add_quick_assist_RMM

Add Quick Assist to the remote admin definition file.
redcanaryco · May 20, 2024 · 465f874 · 465f874
2 parents c9d2b64 + 080b281
commit 465f874
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/definitions/remote-admin.json b/definitions/remote-admin.json
@@ -95,6 +95,11 @@
                         "pcmonitorsrv.exe"],
         "digsig_publisher": ["MMSoft Design Ltd."]
     },
+    "Quick Assist": {
+        "process_name": ["quickassist.exe"],
+        "domain": ["*.support.services.microsoft.com"],
+        "cmdline": ["ms-quick-assist"]
+    },
     "RAdmin": { 
         "process_name": ["radmin3.exe",
                          "famitrfc.exe",